Vista previa de la oferta
Resilience Risk and Impact Assessment Lead
lead · Risk & Compliance
As a Resilience Risk and Impact Assessment Lead at JPMorganChase in Enterprise Technology Resilience, you will lead proactive assessments across critical technology capabilities to identify systemic resilience risks and drive prioritized remediation. You will connect technology and cyber risk signals to business impact, align senior stakeholders on actions, and present clear, governance-ready recommendations. You’ll be part of a collaborative, outcomes-focused team that values practical solutions, strong controls, and transparent reporting.
Job responsibilities
- Lead resilience risk and impact assessments across critical products, services, and applications to identify key vulnerabilities and business impact drivers.
- Define assessment scope, standards, and delivery plan to ensure consistent execution and high-quality outcomes.
- Translate technology and cybersecurity findings into governance-ready materials (executive summaries, risk narratives, control observations, and impact analyses) and present recommendations to senior stakeholders.
- Facilitate working sessions with cross-functional partners (technology, cybersecurity, risk, and control functions) to validate risks, root causes, and remediation options.
- Document actions, owners, milestones, and dependencies in a central tracking tool; track remediation to closure and escalate blockers to support timely decisions.
- Identify systemic themes and emerging resilience risks and propose program improvements based on recurring patterns and lessons learned.
- Partner with stakeholders to strengthen resilience posture and improve control design and operating effectiveness over time.
Required qualifications, capabilities and skills
- 10 years of experience in technology resilience, operational risk, cybersecurity risk, or technology controls/assessments across critical technology environments.
- Experience assessing control design and operating effectiveness, including documenting clear observations and actionable remediation.
- Working knowledge of cybersecurity threats and how adversary tactics, techniques, and procedures can impact availability, integrity, and recovery of critical services.
- Experience translating technical findings into business impact and communicating them through concise, governance-ready writing and executive presentations.
- Experience influencing and aligning senior stakeholders across multiple teams without direct authority.
- Experience facilitating structured working sessions to drive scope alignment, issue resolution, and decision-making.
- Strong delivery skills (planning, escalation, follow-through) in cross-functional environments.
- Proficiency with Microsoft PowerPoint, Excel, and Word for executive storytelling and reporting.
- Bachelor’s degree or equivalent practical experience.
Preferred qualifications, capabilities and skills
- Experience in financial services or another highly regulated industry supporting critical, high-availability systems.
- Familiarity with resilience, risk, and security frameworks (for example, NIST, ISO 27001, SOC 2, or similar control standards).
- Professional certifications such as CISSP, CISM, CISA, or CCSP.
- Experience with business continuity, disaster recovery, and technology resilience testing (including recovery objectives and service restoration planning).
- Experience using data and metrics to monitor remediation progress and communicate risk trends to leadership.
- Experience partnering with threat intelligence or cyber defense teams to incorporate threat-driven insights into resilience prioritization.
This role is designated as a High Risk Role (HRR) and is subject to additional pre-hire screening and/or role-based requirements in accordance with applicable firm policies